Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
File: PsY-XbBDXC0-dKayitPZww1qjO4.mft (raw, json)
Hash identifier: +1/btBGJmoAMhoEZZNtDnD5U7YPYa+yTX0CWd57BsC8=
Subject key identifier: 0B:1F:21:DE:26:1B:1D:AE:9B:15:55:F3:F0:9C:65:9E:84:E2:F7:AF
Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Certificate serial: 01974A436CDCB31AC94E924AF22FE0D3D36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
Manifest number: 0D8C
Signing time: Sat 07 Jun 2025 12:00:22 +0000
Manifest this update: Sat 07 Jun 2025 12:00:22 +0000
Manifest next update: Sun 08 Jun 2025 12:00:22 +0000
Files and hashes: 1: GSEh8gIZdCBsRKOnb9fKkFOFuZk.roa (hash: u2uTEL6Ts0fKYl8Es1LELd2Ambr6iVn6vwhJ7qDD50c=)
2: PsY-XbBDXC0-dKayitPZww1qjO4.crl (hash: pbCUy1dEqILmJCgSQZ5GJ2WBzJCQ9rbau2Gw0BjuYpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:6c:dc:b3:1a:c9:4e:92:4a:f2:2f:e0:d3:d3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Validity
Not Before: Jun 7 12:00:22 2025 GMT
Not After : Jun 8 12:00:22 2025 GMT
Subject: CN=0b1f21de261b1dae9b1555f3f09c659e84e2f7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:45:23:42:f5:cc:82:33:96:8c:5e:80:fc:37:
f2:fe:8a:cb:0e:2d:24:7a:15:f5:ca:c1:7d:9f:eb:
2d:4d:e1:7c:c2:d9:4f:f9:e3:b0:12:63:ed:da:67:
72:38:a2:09:b0:9c:e9:b7:66:96:3a:07:97:4d:10:
27:0e:1c:b8:8c:05:f6:fb:8a:9c:92:c7:3f:c7:be:
29:22:c7:ea:f1:19:4f:8a:5e:9b:cc:27:83:94:33:
ca:66:c3:a4:0d:cb:45:7a:c2:8b:5c:96:b9:c0:23:
ae:1f:3c:f9:86:d3:f1:60:b9:cc:92:d1:1b:e0:88:
78:5d:af:ff:dc:f6:fc:fd:6a:41:f0:30:b1:b7:ec:
06:fd:70:56:56:57:cb:d7:97:af:83:6d:bb:f2:a9:
a1:e5:2d:b9:2d:35:27:2f:0b:fb:f4:db:8b:d9:01:
94:c4:df:98:a0:05:5e:99:e0:c3:c7:de:54:f4:2c:
d1:89:c6:4c:c2:36:93:70:53:e2:58:c7:24:08:26:
73:b4:7e:e9:7b:28:6e:c0:d6:88:98:25:a8:82:16:
6c:ef:3a:38:b3:25:66:0a:3f:14:d4:d9:08:b1:23:
0a:66:8c:cd:27:e6:81:39:59:40:80:b9:3f:0a:f6:
fa:dd:05:06:39:74:68:41:72:ee:20:8c:5c:8d:66:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1F:21:DE:26:1B:1D:AE:9B:15:55:F3:F0:9C:65:9E:84:E2:F7:AF
X509v3 Authority Key Identifier:
keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:35:8e:f3:f6:a4:41:6d:b0:80:ff:92:62:ed:bd:06:7e:a6:
3f:8c:2d:82:1f:14:d9:5e:55:8a:06:a7:83:74:4f:58:61:2f:
2d:6a:14:b9:ab:45:5f:cd:af:64:c8:0f:67:fe:b3:d1:a8:ee:
db:e0:18:ca:f9:73:09:d1:cc:b3:6e:0e:33:9e:d5:17:92:38:
07:dc:a5:09:7d:19:82:18:cf:bf:e6:25:97:e6:b1:78:22:ff:
f7:ed:cc:b7:61:b1:f5:fd:5c:2c:22:a7:3f:1d:ec:59:b3:6f:
f6:ad:b6:af:e9:07:7d:40:57:ff:ba:bb:a2:5d:b1:47:a6:be:
d0:16:3f:78:fd:30:64:09:6b:5a:d7:46:7e:b3:09:b0:e4:9b:
68:42:bb:e2:17:30:37:83:5f:f5:61:76:f9:ad:a9:c1:87:69:
30:79:c1:f4:b4:de:f3:42:80:3a:c9:ed:03:e7:3e:60:80:9e:
7a:46:fe:a6:0e:c0:3a:c9:81:3b:51:98:5d:8e:a0:79:c5:f1:
79:c6:84:82:c0:fb:54:8e:07:2b:10:fb:37:cb:6f:70:58:f4:
dc:bc:21:5d:f8:0b:57:41:95:ae:33:48:74:b1:0f:6b:ba:3f:
c0:f5:c9:d7:7c:01:5c:7a:22:c1:11:e8:28:63:ad:63:82:b8:
f9:55:df:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:01:29 2025 by rpki-client